Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa
File:                     f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa (raw, json)
Hash identifier:          9u+B2KgyeJm13d1sjgjiKCFRUNYZXTu+0QFo7E+BLVg=
Subject key identifier:   66:70:8C:09:30:05:24:30:53:DC:56:F2:D3:3D:3E:ED:07:05:39:43
Certificate issuer:       /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
Certificate serial:       010D0C9F4328584A814653DB7DD95FD8ABE18100
Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        2620:197:f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:53:db:7d:d9:5f:d8:ab:e1:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=0949eac1-27a1-42ad-8278-12b9af154c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c6:82:90:d2:17:36:f1:c0:ce:88:5c:5f:28:
                    af:66:5f:dd:23:61:31:29:2c:09:50:a1:7f:01:a3:
                    df:53:cf:e8:d5:16:d7:28:d5:f8:8e:6a:76:d8:c9:
                    4f:4d:49:be:64:af:de:d3:db:92:dc:30:f0:e5:9c:
                    c4:c0:65:56:21:2f:1b:98:8a:e3:fb:e5:16:88:1f:
                    5f:48:a3:db:38:a3:b5:75:e5:75:04:0f:57:08:37:
                    2e:23:86:4b:6c:a4:ce:fa:cb:de:11:ba:ee:9a:0d:
                    cd:1d:ec:33:94:c4:1e:6e:d0:0a:7b:21:63:6f:90:
                    1e:23:3e:2e:1a:06:32:96:81:4f:ce:06:90:38:10:
                    41:90:df:18:1a:24:56:7a:2e:c9:0b:ad:8a:4a:5f:
                    26:5e:53:37:ab:75:21:c3:a0:e6:75:91:76:23:13:
                    69:2c:5b:8d:68:5c:b0:12:de:25:40:f7:d6:a9:34:
                    8c:ca:cc:13:fd:84:fe:a6:ac:98:42:e1:df:2e:12:
                    5a:53:3d:b5:56:0d:92:03:8d:86:41:b3:1b:78:ba:
                    92:2d:e4:03:b9:3f:80:5b:01:7f:bd:90:43:77:6f:
                    81:1f:17:86:5e:62:1a:4a:67:25:26:97:03:63:ab:
                    3e:80:2a:f6:b3:7a:ac:6f:cb:98:8d:3a:f1:61:56:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:70:8C:09:30:05:24:30:53:DC:56:F2:D3:3D:3E:ED:07:05:39:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl

            X509v3 Authority Key Identifier:
                keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:197:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:7c:2b:84:15:68:55:84:da:57:48:50:ae:3f:18:3c:02:51:
         7c:c6:c4:bd:a3:7a:a9:26:00:66:8a:9d:24:52:ea:b8:b3:fc:
         04:1e:92:60:9e:43:c2:ff:ef:04:44:95:52:49:b4:ae:92:c6:
         92:a5:68:48:8c:09:44:e3:7c:1a:72:6e:45:13:24:6a:f7:f1:
         81:17:39:a8:0a:1d:ed:db:55:cb:5d:8a:d2:ad:5a:6c:a4:6c:
         71:34:5e:84:fd:1c:89:b2:8d:bb:48:0d:4f:37:17:39:5f:52:
         20:3a:1f:3f:86:76:d1:7e:39:61:78:5e:cd:a3:45:2f:cf:d1:
         14:83:dc:e6:92:63:74:64:82:a8:1c:e5:bb:9e:71:1a:51:ec:
         91:24:15:76:ed:ae:88:c6:dd:6f:d8:f8:71:61:1b:66:c9:0d:
         a6:f6:97:69:49:96:ab:f8:f0:ca:1d:77:86:f4:d8:e6:1d:ac:
         4a:20:0f:20:c9:52:2c:ca:49:30:dd:15:4a:f5:4c:8b:da:69:
         75:c1:6b:db:40:e5:dc:77:c2:67:69:fd:34:e0:ed:68:bc:4c:
         d3:79:73:35:1a:25:99:b0:7a:2a:dc:e6:59:e2:d7:76:8c:cd:
         49:a5:b7:c6:1c:8e:65:01:0c:03:9c:4f:e8:57:de:ce:6b:62:
         98:e4:89:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:04:43 2025 by rpki-client